CVE-2026-113036

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code inside the application's restricted security environment sandbox. By convincing a user to visit a specially crafted HTML page, an attacker can trigger memory corruption within the browser's...

CVE-2026-113022

A flaw was found in PDFium in chromium-browser. This memory corruption vulnerability allows a remote attacker to execute arbitrary code within the browser's restricted environment sandbox. An attacker can trigger this issue by convincing a user to open a specially crafted HTML page...

CVE-2026-113048

A flaw was found in the DevTools component of Chromium. This memory corruption vulnerability allows a remote attacker to execute arbitrary code inside the browser's sandbox environment by convincing a user to open a crafted HTML page...

CVE-2026-113031

A flaw was found in chromium-browser. A memory corruption issue in the Media component allows a remote attacker to execute arbitrary code within the application's restricted sandbox environment. To exploit this vulnerability, the attacker must convince a user to visit a specially crafted HTML pag...

CVE-2026-113027

A flaw was found in the WebFonts component of chromium-browser. A remote attacker could exploit this vulnerability to execute arbitrary code within the browser's isolated sandbox environment by convincing a user to load a specially crafted HTML page. This issue is caused by memory corruption...

CVE-2026-113018

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser's sandbox due to a memory corruption issue in the Input Method Editor IME, which manages text input. Exploitation requires tricking a user into viewing a specially crafted HTML page...

CVE-2026-113023

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code outside the browser's isolated security environment sandbox by convincing a user to view a specially crafted HTML page. The issue stems from improper input validation within the Extensions...

CVE-2026-113034

A flaw was found in the FileSystem component of chromium-browser. A remote attacker could exploit this memory corruption vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation may allow the attacker to execute arbitrary code within the application sandbox...

CVE-2026-113032

A flaw was found in the Omnibox address bar component of Google Chrome on Android. A remote attacker can exploit this memory corruption issue by convincing a user to open a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's...

CVE-2026-113016

A flaw was found in chromium-browser. Improper input validation within the Extensions component allows a remote attacker to execute arbitrary code within the browser's restricted isolation environment sandbox. An attacker could exploit this vulnerability by enticing a user to view a specially...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

CVE-2026-113020

A flaw was found in chromium-browser. Due to improper input validation in the Date component, a remote attacker can execute arbitrary code outside the browser's restricted sandbox environment by convincing a user to visit a specially crafted HTML page. Successful exploitation could compromise the...

CVE-2026-113013

A flaw was found in Chromium DevTools. A remote attacker could exploit this memory corruption issue by convincing a user to open a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser sandbox...

CVE-2026-112994

A flaw was found in chromium-browser. This vulnerability is caused by memory corruption within the browser. A remote attacker could exploit this issue by convincing a user to load a crafted HTML page, potentially leading to arbitrary code execution inside the browser sandbox...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE

Microsoft Semantic Kernel BPassed to VectorStore query/filter B -- CInMemoryVectorStore evaluates filter expression unsafely C -- DUnsafe attribute resolution via class / base / subclasses D -- EAccess to init.globals containing os and builtins E -- FArbitrary code execution e.g. os.system F --...

Vitest: Code injection via unauthenticated manual mock registration

Summary @vitest/mocker's interceptorPlugin accepts mock registrations on Vite's dev-server WebSocket with no authentication, and interpolates the mock's url into generated module source without escaping. A client that can reach the dev server can make it serve arbitrary JavaScript in place of any...

CLSA-2026-1792612092 Fix CVE(s): CVE-2026-109618, CVE-2026-109619

SECURITY UPDATE: remote code execution via state corruption after a bailout and via stale request-global state - debian/patches/CVE-2026-109618-CVE-2026-109619.patch: PHP security team's minimal mitigation for EOL branches: report allocator overflow and out-of-memory errors via zendmmsafeerrorex...

CLSA-2026-1792611813 php: Fix of 2 CVEs

CVE-2026-109618: fix code execution via state corruption after an out-of-memory error GHSA-w8hw-w9fx-j79w - CVE-2026-109619: fix code execution via stale global state between requests GHSA-6wmf-4rv5-p3rp...

cmd/go: golang: cmd/go: arbitrary code execution via untrusted module proxy

A flaw was found in the Go toolchain cmd/go. When a user works inside a malicious Go project that defines a bogus golang.org/fips140 module and connects to an untrusted Go module proxy GOMODPROXY, the proxy can serve an arbitrary replacement module that still passes local verification. This can...